CVE-2026-77654 — Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer

CVE-2026-77654

Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer PUBLISHED

Description (CNA)

Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.

Affected (CNA)

Vendor / product	Versions
Algosec / Horizon Security Analyzer	affected A33.10 (up to build 300); affected A33.20 (up to build 170); affected A33.30 (up to build 110)

CWE

CWE-266

References

https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2026-77654.htm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.